9.1.22
Bugfix
- [security] A form defined on a page restricted by an
access:rule, or on an unpublished page, can no longer be submitted from a different page by someone who could not reach that page in the first place (GHSA-33m4-m988-5fvh).
access: rule, or on an unpublished page, can no longer be submitted from a different page by someone who could not reach that page in the first place (GHSA-33m4-m988-5fvh).